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Claim Amendment under 37 C.F.R. §1.121 

Claim 1. (Currently amended) An access control system, comprising: 

a Virtual Secure Disk (VSD) image file module occupying a certain space of a hard disk 
in a file form; 

a VSD drive for processing security-sensitive files within the VSD image file module; 

an encryption and decryption module for encrypting and decrypting data input, output, 
or input and output between the VSD image file module and the VSD drive; 

a VSD file system module for allowing an operating system to recognize the VSD drive 
as a separate disk volume at a time of access to the security-sensitive files within the VSD 
image file module; and 

an access control module for determining access by determining whether an access 
location is a disk drive or the VSD drive and an application module has been authorized to 
access a file, which is stored on the hard disk, to perform tasks in the application module, 
wherein an authorized application module is configured to access the VSD drive for write and 
read operations, wherein the authorized application module is configured to access the disk 
drive for a read operation only, wherein an unauthorized application module is configured to 
access the disk drive for write and read operations, and wherein the unauthorized application 
module is not allowed to access the VSD drive,, 

wherein the access control module comprises: 

an extended system service table for allowing the operation of a corresponding function 
to be performed when it is pointed at by a descriptor; and 

an extended system table for changing a function, which is requested of the service 
system table by the application module, to prevent operation of the function, determining 
whether a space in which a corresponding task is performed is the disk drive or the VSD drive, 
determining whether access to the corresponding file by the application module has been 
authorized, and providing an unchanged function to the extended system service table or 
stopping the operation of the function according to results of the determination . 

Claim 2. (Canceled) 
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Claim 3. (Currently amended) The access control system according to claim 1 er-2, 
wherein the VSD image file module virtually occupies the hard disk so as to allow the 
operating system to recognize the data as being assigned to a certain space of the hard disk 
without performing physical assignment for storing the data on the hard disk, so that an 
authorized application module can physically assign the data to the space. 

Claims 4-6. (Canceled) 
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